Available for projects
Vincent de Vries
Cybersecurity Specialist
I find the vulnerabilities in your web applications before the bad guys do — and deliver clear, actionable reports.
I find the vulnerabilities in your web applications before the bad guys do — and deliver clear, actionable reports.
Systematic scanning and manual testing of your web application to identify security weaknesses before they can be exploited.
Authorised simulated attacks on your systems to test real-world resilience. Includes business logic flaws, authentication and API security.
Clear, professional reports with all findings, risk ratings, reproduction steps and concrete recommendations — ready for your development team.
Security-focused review of PHP, JavaScript and web application code. I spot injection risks, broken access control and insecure patterns.
I'm Vincent de Vries — a freelance cybersecurity specialist based in Hamburg. My background is in software development and web technologies, which gives me a solid understanding of how applications are built and, more importantly, how they can break.
I work with written authorisation only. Every engagement starts with a clear scope and ends with a professional report your team can actually act on.
"A security audit is like an MOT for your car — you might think everything is fine, but you only really know after someone checks under the hood."
"We had no idea the vulnerability existed until Vincent showed us exactly how it worked. The report was clear enough that our developer fixed it the same day."
"Most hackers don't announce themselves. Vincent does — and that's exactly the point."
Authorised penetration test of the Bäderland online ticket shop. Multiple vulnerabilities identified across different severity levels. Full details withheld pending remediation.
Curious what a full report looks like? View a sample report with fictitious data to see exactly what you'll receive.
Have a project in mind or want to know if your application is secure? Send me a message and I'll get back to you within one business day.
All engagements require written authorisation from the system owner.
contact@vdevries.nl